Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rb3VPlaH2MfnGMRZvcTijlU83M4.cer
File:                     rb3VPlaH2MfnGMRZvcTijlU83M4.cer (raw, json)
Hash identifier:          5jAcSf5vKErFiym7hLx+A3OJ0eVa3zxINotT6AN3zXg=
Subject key identifier:   AD:BD:D5:3E:56:87:D8:C7:E7:18:C4:59:BD:C4:E2:8E:55:3C:DC:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9DA426BA51
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/42/4c8738-ff3f-428f-8ddc-f29462f7872a/1/rb3VPlaH2MfnGMRZvcTijlU83M4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/42/4c8738-ff3f-428f-8ddc-f29462f7872a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 04:52:49 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 205537
                          IP: 185.214.204.0/22
                          IP: 2a0b:9ac0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677063866961 (0x9da426ba51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:52:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=adbdd53e5687d8c7e718c459bdc4e28e553cdcce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ed:89:79:b4:21:40:03:bf:50:a0:c8:9b:53:
                    11:02:6d:5f:09:b5:3c:31:c9:ae:b2:71:77:fd:2a:
                    02:10:3d:04:ad:07:7e:bc:72:ec:6b:0e:bc:ce:b0:
                    fb:0b:77:61:f4:3a:84:fc:18:87:2a:b0:f7:c8:25:
                    e8:39:de:ff:35:f0:cf:2a:41:06:1d:3d:26:f8:2d:
                    67:f6:ef:ee:a7:d4:d7:96:45:81:7c:33:2d:54:17:
                    bd:23:1a:21:11:49:c2:e0:6c:15:8e:f1:1c:12:56:
                    79:86:67:e5:d4:94:21:25:34:83:ed:90:94:2d:ca:
                    0c:8a:3f:a8:3f:7d:43:ce:2a:ba:52:46:93:e0:e5:
                    e4:89:29:9d:f6:0e:d8:78:18:f8:16:23:73:36:02:
                    68:f9:89:e5:cf:25:3d:c1:ac:58:87:a1:f0:68:4f:
                    87:3a:d0:a3:67:92:9d:1b:d1:aa:cf:75:d5:da:b4:
                    b8:23:12:69:9b:4a:ca:61:59:82:ad:f5:d3:6e:92:
                    81:52:ab:5b:3a:fa:9b:6d:39:bf:db:15:6b:bd:97:
                    1a:49:2f:80:09:6c:ff:2f:9b:fd:f3:08:c8:c4:61:
                    13:a4:0f:d1:a6:5b:55:f1:36:e8:8c:88:91:d4:d0:
                    80:57:8c:e3:49:fe:cf:a2:39:32:45:42:98:f2:4e:
                    2e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BD:D5:3E:56:87:D8:C7:E7:18:C4:59:BD:C4:E2:8E:55:3C:DC:CE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4c8738-ff3f-428f-8ddc-f29462f7872a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4c8738-ff3f-428f-8ddc-f29462f7872a/1/rb3VPlaH2MfnGMRZvcTijlU83M4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.214.204.0/22
                IPv6:
                  2a0b:9ac0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205537

    Signature Algorithm: sha256WithRSAEncryption
         93:00:d3:da:71:91:05:9d:78:56:93:45:08:27:58:33:8f:95:
         5a:e0:d6:0d:c1:02:3c:f0:a0:09:dd:9b:7b:26:f4:fe:ee:85:
         1f:cc:9c:3c:f8:8d:68:ab:a6:6b:98:f3:b7:f8:b8:eb:0b:67:
         93:0d:17:07:c0:dd:c0:2c:f2:22:88:c3:66:5e:57:34:1e:44:
         d0:59:4b:88:3c:4b:a7:f0:08:3b:e3:ae:d6:00:fb:87:ff:e8:
         61:52:4d:4d:00:5d:13:b9:b6:34:40:14:ce:38:07:34:4a:ec:
         e3:54:53:78:86:34:4a:de:9a:b5:d6:27:8a:e9:d3:38:dd:d8:
         d6:29:2f:1c:01:d7:64:3a:20:51:7e:44:31:dc:30:3a:0a:bc:
         4e:04:94:c0:a1:9f:a2:e8:bf:b7:6d:1f:4b:31:a4:35:5c:bd:
         47:1c:ef:d5:92:a3:ad:aa:eb:1d:09:16:fc:0b:48:76:d8:54:
         68:89:73:8e:32:c1:cf:da:8d:d9:51:3f:8c:c6:84:6a:e7:6a:
         5e:64:a2:88:b0:98:b1:90:be:7a:be:fe:5f:d8:6a:b5:42:aa:
         3d:81:56:bd:98:12:19:39:4b:39:a7:3a:14:95:93:52:aa:e8:
         d4:81:d0:ca:89:01:38:fc:5a:51:b5:83:c2:3d:b0:de:32:00:
         11:a6:5e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----